Suspicious mainspace out-of-process deletions

SQL

select replace(concat("[[:{{subst:ns:",log_namespace,"}}:",replace(log_title,"_"," "),"]]"),":{{subst:ns:0}}:",":") as 'Page',
(select actor_name from actor_logging where actor_id=log_actor) as "Deleting admin",
comment_text as "Edit summary",
log_timestamp as "Timestamp" from logging_logindex join comment_logging on comment_id=log_comment_id
where log_type="delete" and log_action="delete"
and (comment_text not like "%[[WP:CSD#%"
      and comment_text not regexp "\\[\\[WP:[GA][0-9]{1,2}.*"
      and comment_text not regexp "^\\[\\[(Wikipedia|WP):(Articles[ _]for[ _]deletion|Redirects[ _]for[ _]discussion).*"
      and comment_text not like "Per outcome of [[WP:RFD]]" -- Odd format used by BD2412
      and comment_text not like "Expired [[WP:PROD|PROD]]%"
      and comment_text not like "Multiple reasons: speedy deletion criteria%"
      and comment_text not regexp ".*listed at \[\[(Wikipedia:Copyright problems|WP:CP)\]\].*"
      and comment_text not like "%BLPPROD%"
      and comment_text not regexp ".*[Gg][35].*" -- these tend to use odd formats, so exclude them
      and comment_text not regexp "^(CSD )?[GAg][0-9]{1,2}($|[.,/])?" -- exclude cases containing just a code, or a code followed
      -- by an explanation with a comma, period or slash. I deliberately don't exclude just [GARFCU][0-9]{1,2} as that's
      -- too broad and risks too many false negatives
     )
and not exists (select 1 from page where page_namespace=0 and page_title=log_title)
and exists (select 1 from archive where ar_namespace=0 and ar_title=log_title and ar_timestamp < log_timestamp-1000000)
and log_namespace=0
and (log_timestamp like "202210%")
order by log_timestamp desc;
SQL

Checking query status...
